Ticket #182 (closed defect: fixed)
Need help with using BPF filters with tcpprep
| Reported by: | sunilis@… | Owned by: | aturner |
|---|---|---|---|
| Priority: | low | Milestone: | 3.1 |
| Component: | tcpprep | Version: | 3.0.1 |
| Keywords: | Cc: | ||
| Operating System: | Add to FAQ?: | no | |
| Hardware: | All | ||
| Output of tcpreplay -V: | [root]# tcpreplay -V tcpreplay version: 3.0.beta13 (build 1732) Copyright 2001-2007 by Aaron Turner <aturner at synfin dot net> Cache file supported: 04 Not compiled with libnet. Compiled against libpcap: 0.8.3 64 bit packet counters: disabled Verbose printing via tcpdump: enabled [root@]# | ||
Description
Hi :
Why does tcpprep complain about this BPF filter. The same filter when used with tcpdump works ok. [root@]# /usr/local/bin/tcpprep --include=F:"ether src 00:10:db:ff:a0:70" --mac 00:10:db:ff:a0:70 --pcap=Brian_Test001-00000 --cachefile=Brian_Test001-00000.cache
Fatal Error: Error compiling BPF filter: syntax error [root@]#
Attachments
Change History
Note: See
TracTickets for help on using
tickets.
